CWE-784: Reliance on Cookies without Validation and Integrity Checking in a Security Decision
The product uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user.
A kind of CWE-565 Reliance on Cookies without Validation and Integrity Checking.
From the CWE List. © The MITRE Corporation.
Newest
- weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision 8.7 High
- cubecart v6 CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header 8.1 High
- dueclic wp 2fa with telegram, authpress +1 more WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass 6.5 Medium
- tmt lockcell, tmtmakine lockcell firmware +1 more Authentication Bypass in TMT's Lockcell 9.8 Critical
- landis+gyr e850 (zmq200), landisgyr e850 firmware +1 more All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without... 3.9 Low
- rack project rack, canonical ubuntu linux, debian linux +2 more Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High